diff --git a/rustfs/src/admin/router.rs b/rustfs/src/admin/router.rs
index 18193d096..c9f5e939e 100644
--- a/rustfs/src/admin/router.rs
+++ b/rustfs/src/admin/router.rs
@@ -71,6 +71,10 @@ where
 
         // warn!("get uri {}", &uri);
 
+        if req.credentials.is_none() {
+            return Err(s3_error!(AccessDenied, "Signature is required"));
+        }
+
         if let Ok(mat) = self.router.at(&uri) {
             let op: &T = mat.value;
             return op.call(req, mat.params).await;
diff --git a/rustfs/src/storage/acess.rs b/rustfs/src/storage/access.rs
similarity index 98%
rename from rustfs/src/storage/acess.rs
rename to rustfs/src/storage/access.rs
index c13b027ea..1581e96e0 100644
--- a/rustfs/src/storage/acess.rs
+++ b/rustfs/src/storage/access.rs
@@ -8,6 +8,7 @@ use s3s::access::{S3Access, S3AccessContext};
 
 use s3s::auth::Credentials;
 use s3s::{dto::*, s3_error, S3Request, S3Result};
+use tracing::info;
 use uuid::Uuid;
 
 #[allow(dead_code)]
@@ -43,7 +44,18 @@ impl S3Access for FS {
     // /// + [`cx.extensions_mut()`](S3AccessContext::extensions_mut)
     async fn check(&self, cx: &mut S3AccessContext<'_>) -> S3Result<()> {
         // 上层验证了 ak/sk
-        // warn!("check s3_op {:?} cred {:?}", cx.s3_op().name(), cx.credentials());
+        info!(
+            "s3 check path: {:?}, s3_op: {:?}, cred: {:?}",
+            cx.s3_path(),
+            cx.s3_op().name(),
+            cx.credentials()
+        );
+
+        if cx.credentials().is_none() {
+            return Err(s3_error!(AccessDenied, "Signature is required"));
+        };
+
+        // TODO: FIXME: check auth
 
         let action = match Action::from_str(format!("s3:{}", cx.s3_op().name()).as_str()) {
             Ok(res) => Some(res),
diff --git a/rustfs/src/storage/mod.rs b/rustfs/src/storage/mod.rs
index 824760b2a..d7d9d87ea 100644
--- a/rustfs/src/storage/mod.rs
+++ b/rustfs/src/storage/mod.rs
@@ -1,4 +1,4 @@
-pub mod acess;
+pub mod access;
 pub mod ecfs;
 pub mod error;
 pub mod options;